AZ-2001: Implement security through a pipeline using Azure DevOps
Last Updated: 04-02-2025
The AZ-2001: Implement Security through a Pipeline using Azure DevOps course is designed for DevOps engineers, security professionals, and cloud developers who aim to implement robust security practices directly into their CI/CD pipelines using Azure DevOps. This training will equip you with the skills necessary to automate and streamline security tasks in the software development lifecycle, leveraging tools and practices like Secure DevOps, DevSecOps, and Azure Security.
This hands-on course focuses on integrating security controls, code analysis, vulnerability scanning, and compliance monitoring within the Azure DevOps pipelines, ensuring that security is an integral part of the software delivery process. By the end of the course, you'll be able to confidently secure your DevOps pipelines and build safer, more compliant applications in the Azure environment.
Familiarity with DevOps practices and tools, especially Azure DevOps.
Basic knowledge of version control systems like Git.
Understanding of CI/CD principles and concepts.
Some familiarity with security best practices and tools used in cloud environments.
Basic experience with Azure services and the Azure portal.
While prior experience in security engineering is not required, understanding of general security concepts will be beneficial.
Learning Objectives
By the end of the AZ-2001: Implement Security through a Pipeline using Azure DevOps course, you will be able to:
Set up Azure DevOps environments and configure pipelines for continuous integration and delivery with security integration.
Implement secure coding practices and automate security testing using tools such as SonarQube, WhiteSource, and OWASP Dependency-Check.
Integrate security checks into every stage of the DevOps pipeline using tools like Azure Security Center, Azure Key Vault, and Azure Policy.
Automate vulnerability scanning in your DevOps pipeline with Azure DevOps and third-party security tools to ensure compliance.
Implement container security by integrating Azure Container Registry (ACR) and Azure Kubernetes Service (AKS) into the pipeline for secure container image scanning.
Enforce access controls and manage secrets and keys securely with Azure Key Vault within DevOps workflows.
Ensure regulatory compliance and audit trails for DevOps projects by leveraging Azure Policy and compliance tools.
Integrate threat modeling and automated security testing during both the build and release pipeline stages.
Automate security monitoring and incident management by integrating Azure Monitor, Log Analytics, and Application Insights with the Azure DevOps pipeline.
Apply security best practices in a continuous delivery environment, ensuring that security vulnerabilities are identified and remediated in early stages of the software lifecycle.
Target Audience
This course is ideal for:
DevOps engineers looking to integrate security into their CI/CD pipelines using Azure DevOps.
Security professionals who want to learn about security automation and integration with DevOps processes.
Cloud developers seeking to implement security practices during development and deployment in Azure DevOps.
Azure professionals who want to understand how to integrate security into the end-to-end Azure DevOps pipeline.
IT and system administrators who are involved in securing and managing Azure DevOps environments.
Course Modules
Trustpilot
What Our Learners Are Saying
The training, courseware, and lab experience were insightful and valuable. Keep up the great work and
learning experience!
Nitish A. Anand – Accenture
Course: SC-200: Microsoft Security Operations Analyst
Date: 15th Jan 2025
The instructor was professional and very content.
Justine Daudi Mlimbilah – Bank of Africa, Tanzania
Course: MD-102: Microsoft 365 Endpoint Administrator
Date: 20th Dec 2024
The instructor was so knowledgeable & humble. Rare to find someone so confident but so down to earth these
days. So appreciative to him.”
Mohd. Hassan – Ministry of Finance, UAE
Course: AZ-700: Designing and Implementing Microsoft Azure Networking Solutions
Date: 31st July 2024
Instructor is experienced and knowledgeable in guiding.
Dharshini Mahalaxmi – Dr. MGR Education and Research Institute, Chennai, India
Course: SC-300: Microsoft Identity and Access Administrator
Date: 4th May 2024
